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Bound information, a cryptographic classical analogue of bound entanglement, is defined as clas- 
sical secret correlations from which no secret key can be extracted. Its existence was conjectured 
and shown in a multipartite case. In this work, we provide a new example of bound information in 
a four-partite scenario. Later, using this example, we prove that bound information can be superac- 
tivated in a finite-copy scenario and unlockable. We also show that bound entangled states (bound 
information) can be used to distribute multipartite pure-state entanglement (secret key). 

PACS numbers: 



I. INTRODUCTION 

Entanglement is one of the key resources that dis- 
tinguish Quantum Information Theory from its classi- 
cal counterpart. The impossibility for spatially sepa- 
rated parties to create entangled states by local operation 
and classical communication (LOCC) underlies the cru- 
cial role that entanglement plays for communication pur- 
poses. The property that entanglement is non-increasing 
under LOCC naturally leads to the definition of the max- 
imally entangled state pQ, 

Wab) = (|00> + |ll»/\/2. 

This state is often called an entangled bit (ebit) and used 
as the unit of entanglement. Distilling ebits is a basic 
task in quantum communication scenarios. 

The quantum distillation scenario shares many simi- 
larities with the information-theoretic secret key distil- 
lation scenario introduced in Ref. [2]. In this classical 
scenario, a secret bit (sbit) is aimed to be distilled from 
initially shared secret correlations using local operations 
and public communication (LOPC). An sbit is described 
by a probability distribution among honest parties Alice 
(A) and Bob (B) and an eavesdropper Eve (£), Pabs, 
satisfying: 

Pabs (a, b, e) = Pas (a, b) Pg(e), 

P AB (a,b) = 6 a , b /2 (1) 

for a,i e {0, 1}. The former condition means that the 
honest parties are uncorrelated with Eve, and the lat- 
ter shows perfect correlations between them. Analogous 
to properties of entanglement, secret correlations do not 
increase under LOPC py. Therefore, an sbit represents 
the maximal secret correlations and is used as the unit 
of classical correlations. 

One can then relate an ebit with an sbit and vice 
versa as the basic analogues of units of correlations. 
Based on this correspondence, further analogies between 
quantum and classical scenarios follow, e.g. LOPC as a 
classical analogue of LOCC [3j. Moreover, interrelations 
of information-theoretic quantities and their operational 



meanings have also been investigated in p|] [5] [5J. 

There are also well-established quantitative relations 
between quantum and secret correlations. To introduce 
them, let us briefly remind two entanglement measures 
presented in Refs [9] . Each measure has operational 
meaning, one for the formation and the other for the 
distillation of enangled quantum states. The entangle- 
ment cost denoted by E c quantifies the number of ebits 
for the formation of a given quantum state pab in the 
asymptotic limit, i.e. when the number of copies of pab 
tends to be very large [7]. Entanglement cost is positive 
if and only if a given state is entangled [5]. In a simi- 
lar way, the number of ebits that can be distilled out of 
given quantum states in the asymptotic limit is quanti- 
fied and called entanglement of distillation denoted by 
Ejj [5]. In general, it holds that E c > Erj as one can- 
not get more entanglement from given states than that 
used for the preparation. The existence of undistillable, 
i.e. bound, entangled states [TU], shows the irreversibil- 
ity in the entanglement manipulation and appears when 
E c > Ed = 0. It has been shown that, despite their 
undistillability per se, bound entangled states can be ac- 
tivated [TO] PCE] [Hi- 
Similar questions can be addressed in the context of the 
classical cryptographic scenario. That is, when a proba- 
bility distribution Pabs is given, the information of for- 
mation denoted by I c has been derived as the classical 
analog of E c [T3] , and determines the number of sbits for 
the formation of a given distribution via LOPC. Positive 
information of formation, I C (A : B\C) > 0, means that 
a given probability distribution contains secret correla- 
tions. For the distillation, the natural classical analog 
is the secret key rate, denoted by S(A : B\\£) [2], the 
number of sbits that can be distilled from given classical 
correlations in the asymptotic limit. 

Quantum and classical correlations can be related by 
measurement, i.e. Pabs = ^[pabsMa ® Mb <8> Me] 
where Mj for j — A,B,£ are positive-operator-valued- 
measure on quantum state pabs- It immediately follows 
that an sbit is obtained by measuring an ebit in the com- 
putational basis. Entanglement and secret correlations 
are also generally interrelated. That is, given quantum 
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states, if they are entangled, there always exist local mea- 
surements such that the measured outcomes contain se- 
cret correlations. As well, given probability distributions 
obtained by measuring quantum states, if they consist 
of secret correlations, then the corresponding quantum 
states must be entangled, i.e. E c > I c > |15j . 

As a classical analog of bound entanglement, bound in- 
formation was defined as secret correlations from which 
no sbit can be distilled [4]. The existence of bound in- 
formation was then explored, and was indeed shown in 
Ref. |16j . An instance of bound information was explic- 
itly provided in a multipartite scenario, and remarkably, 
was obtained by measuring bound entangled states pre- 
sented in Ref. [T2]. Moreover, it was shown that bound 
information can be activated in an asymptotic-copy sce- 
nario [16]. Note that this is also called superactivation 
in the sense that individual probability distributions con- 
sisting of bound information are undistillable while the 
one combined together can be converted to distillable cor- 
relations. 

In this work, along the interrelation between quan- 
tum and secret correlations, we study further properties 
of bound information. We introduce the classical ana- 
logues of finite-copy superactivation and the unlockabil- 
ity of bound entanglement. All these findings are based 
on the intriguing properties of the Smolin state intro- 
duced in Ref. [T7]. We also discover a useful feature of 
the undistillable correlations in distributing pure-state 
entanglement and multipartite sbits. In the quantum 
scenario, it is shown that the tripartite GHZ state can 
be extended to the four-partite GHZ state using LOCC, 
given that a four-partite bound entangled state is shared 
among parties. A classical analogue also follows. When 
bound information is shared by four parties, an sbit of 
three parties can be distributed over the four parties us- 
ing LOPC. Note also that the Smolin state is immedi- 
ately a feasible resource that has been implemented with 
present-day technology [18]. 

This paper is organized as follows. In Sec. [H] the prop- 
erties of Smolin states are briefly reviewed. In Sec. |III| 
the bound information is then derived by measurement 
on the Smolin state, and the properties such as unlocka- 
bility and superactivation are translated. 
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it is 



In Sec. 

shown that bound entangled state (bound information) 
together with LOCC (LOPC) can be used to extend GHZ 
states (sbits) from three to four parties. 



II. THE SMOLIN STATE 

Let us first briefly review the properties of the Smolin 
state presented in Ref. [IT]. The Smolin state is a four- 
partite bound entangled state, shared by, say Alice, Bob, 
Clare and David: 



where |^) = (|00) + \U))/V2, |^ 2 ) = (|00) - |11))/V2, 
= (|01) + |10»A/2, and |^ 4 ) = (|01) - |10))/V2. 
This state has been exploited to derive intriguing effects 
of bound entanglement such as the unlockability and the 
superactivation in a finite-copy scenario [17) . Let us sum- 
marize the properties in the following. 

• (i) Invariance under permutations. The state 
is symmetric under any exchange of parties, i.e. 

PABCD — PABDC = PADBC- 

• (ii) Undistillability. Looking at the bipartite split- 
ting AB : CD in the state in Eq. ([2j>, it is clear that 
the state is separable across the cut. Then, from 
the property (i), it follows that the state is sepa- 
rable in all bipartitions across two parties versus 
the others, such as AC : BD and AD : BC. This 
already shows that no pair of parties can distill en- 
tanglement, and therefore the state is undistillable. 

• (iii) Unlockability. An important property of the 
state is the unlockability of entanglement. This can 
be seen when two parties among the four join to- 
gether and apply collective operations to discrimi- 
nate among the four Bell states. Announcing the 
measurement outcome, the two joined parties can 
allow the other two parties to know which Bell state 
is shared between them. Then, applying local uni- 
taries that depend on the announced outcome, they 
can finally distill the Bell state \ipi). This shows 
that the Smolin state is entangled, and also bound 
entangled together with the property (ii). 

Superactivation with finite copies. One of the intrigu- 
ing effects in the entanglement theory is that bound en- 
tangled states can be activated. The Smolin state was in 
particular exploited to show a strong version of the ef- 
fect, superactivation in a finite-copy scenario. It is called 
superactivation in the sense that Ejj(pi (g) p 2 ) > while 
Ed(Pi) = E D (p 2 ) = 0. This was shown in Ref. [15] , 
and the activation works as follows. Suppose that, now 
including the fifth one Elena, two copies of the Smolin 
state are shared by the five parties in the following way, 



PA 1 CiB 1 D ® PA 2 B 2 C 2 E, 



(3) 



PABCD = \ ^2 \lpi)AB{lpt\ ® \^i)CD{^i\, 



(2) 



where the first and the second copies are labeled. Then, 
David and Elena distill an ebit, applying the following 
protocol, see also Fig. [T] First, Alice teleports her qubit 
state of A 2 to Clare sacrificing the unknown Bell state 
shared between A\ and C%. Clare is then with two qubits 
Cj and C 2 where C l is in the teleported state from A 2 . 
Next, Bob teleports his qubit state of B 2 to D using the 
unknown Bell state shared between B\ and D. Then, 
David is now with D in the teleported state from B 2 . 
Finally, due to the structure of the Smolin state, the state 
C 1 C 2 D E shared by Clare, David, and Elena results in 
the Smolin state. Since Clare holds two qubits C l and C 2 , 
she can discriminate among Bell states and announces 
the result, by which David and Elena can distill an ebit. 
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FIG. 1: The activation protocol for both the quantum and 
classical scenarios is shown. For the quantum scenario, two 
Smolin states pa 1 CiB 1 d and pa 2 b 2 c 2 e are drawn with the 
dashed and solid lines, respectively. For the classical sce- 
nario, the Smolin states are simply replaced with the bound 
information in Q. In both cases, the first step in the pro- 
tocol (shown in I— >II) is that Alice teleports her state in the 
system A2 to Ci using the correlation between A\C\. In the 
second step (shown in II — >-III) , Bob teleports the state of his 
system B2 to D sacrificing the correlation existing in BiD. 
Then, the resulting distribution over the remaining three par- 
ties, Clare holding two systems, David, and Elena is in fact 
the Smolin state if the scenario is with quantum systems, or 
the bound information in Q if it is with classical systems. 
Finally (shown in III— »IV ), Clare measures her systems and 
announces the outcomes, so that David and Elena distill an 
ebit or an sbit. 



Now, symmetrizing the state in Eq. ([3]) with more copies 
as follows, 

PABCD ® PABCE ® PABDE ® PACDE ® PBCDE, (4) 

any two parties among the five can distill ebits. In this 
way, from ebits shared by every two parties, it follows 
that multipartite pure entangled states can be distilled. 
This finally shows that multipartite bound entangled 
states can be superactivated. It is also noteworthy in 
the activation scenario that, the distillable entanglement 
defined in the asymptotic limit becomes immediately pos- 
itive in a finite number of copies. 



III. BOUND INFORMATION 



I {A : B 18) [2 1, such that 

I C (A : B\8) >I(A:B\.8)> S(A : B\\8). (5) 

Its usefulness lies on the fact that a general undistillabil- 
ity criterion is lacked and zero-valued intrinsic informa- 
tion is immediately a sufficient condition for the undistill- 
ability. This condition is therefore going to be used later 
on, when proving that a given probability distribution 
contains bound information. The intrinsic information is 
defined as the minimum of the conditional mutual infor- 
mation of honest parties given an eavesdropper, 

I(A: B 18) = mm I(A: B\8), (6) 

over all Eve's stochastic mappings £—!•£. 

In the following subsections, we show that measure- 
ments on the Smolin states in the computational basis in 
fact give bound information. We then show that bound 
information can be superactivated in a finite-copy sce- 
nario, analogously to the quantum case. 

A. Bound information and the unlockability 

The entanglement properties can be related to cryp- 
tographic properties of the probability distributions that 
are obtained by measuring given quantum states. With- 
out loss of generality, one can assume that Eve has access 
to the rest of legitimate parties, and this is expressed by 
the fact that Eve holds the purification. For instance, 
when the Smolin state pabcd is shared, one can find a 
state \ip) abc ds such that pabcd = tT S \ip}{i/)\ A BCDS ■ In 
this way, Eve is naturally included and her correlations 
with the legitimate parties are readily shown. Denoted 
by positive operator M a of party a, the probability dis- 
tribution Pabcds of the five parties reads, 

tr[M A ® M B (g> M c <8> M D <g) M e \ip)(ip\ABCDe]- 

Suppose that measurements applied by the parties are in 
the computational basis. The probability distribution is 
explicitly given by, 
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(7) 



Bound information is characterized by two constraints 
on probability distributions, i) existence of secret cor- 
relations I C (A : B\8) > and ii) the undistillabil- 
ity S{A : B\\8) = 0. There is an information mea- 
sure located in the between, the intrinsic information 



In what follows, we show that, analogously to the quan- 
tum case, the distribution ([7| in fact contains bound in- 
formation which is also unlockable. All these are ob- 
tained as classical analogues of the properties shown in 
the Smolin state in Eq. 
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• (i') Invariance under permutations. The distribu- 
tion |7| is invariant under permutations of parties, 
i-e. Pacbds = P abode. = Padbcs- 

• (ii') Undistillability. The distribution 
P(A,C, E>, D,£) is undistillable in every bi- 
partition across two parties versus the others. 
That is, for instance in the bipartition between 
AC and BD, it holds that 



Let us begin with the the following probability distri- 
bution shared by the five parties, 



Pabcde = Pa 1 c 1 b 1 dPa 2 B2 C2 E 1 



(10) 



I(AC : BD i £) = 0, 



(8) 



where Eve's local mapping is given by, £2 — > £1 
and £3 — > £4. From the relation in ([5]), it follows 
that S{AC : BD\\£) = 0. Then, the permutational 
invariance in (i') implies S(AB : CD\\£) = S{AD : 
BC\\£) — 0, and therefore none of two parties can 
distill an sbit. 



where each four-partite distribution is shown in Eq. ^ 
and the first and the second copies are labeled. Note 
that the distribution in Eq. ( 10 ) can also be obtained 
by directly measuring the tensored state in ([3| in the 
computational basis. To be explicit, the distribution in 
Eq. (10 1 shows, for 2, j — 0, 1, 



• (iii') Unlockability. The secret correlations exist- 
ing in ([7]) are unlockable. Suppose two parties, for 
instance B and D, join together and post-select ei- 
ther case that they are the same or different. Let 
us now restrict to the case that B and D accept 
when they share the same bit values. Then, the 
distribution is given by 
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(9) 



This means that an sbit is distilled between A 
and C, since it is clear in the distribution ([9]) 
that i) P A c{0,0) = Pac(1,1) = 1/2 and u) 
Pacs{o; c, e) = PAcio-i c)Ps(e). For the other case 
that B and D accept whenever they share different 
bit values, applying the bit-flip operation either A 
and C, Alice and Clare can distill an sbit. From 
the symmetry property in (i'), it immediately fol- 
lows that any two parties who join and collaborate 
to identify the shared state can allow the other two 
parties to distill an sbit. As an sbit is distilled, this 
also means that the probability distribution in ([T]) 
consists of secret correlations. Together with the 
undistillability in (ii'), it is shown that the distri- 
bution in (|7l indeed contains bound information. 



B. Superactivation 

In this subsection, we show that bound information 
can be superactivated in a finite-copy scenario. We first 
show that an sbit can be distilled by two parties when 
two copies of the bound information in Eq. Q are shared 
by five parties. Then, it follows with more copies that 
multipartite sbits are distilled by the five parties. 
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This expression can be obtained using a simpler form of 
Eq. ufh that is shown in the appendix A. 



The classical analogue of the quantum teleportation, 
which is to be used in the activation protocol, is in fact 
the one-time pad that securely sends a classical bit by 
sacrificing an sbit. For convenience, we also call this 
"teleporting" classical bits, which works as follows. As- 
sume that an sbit s, is shared by two honest parties. The 
sender encodes a message x and publicly announces the 
addition (x + s), so that the receiver can decode the mes- 
sage by adding the shared sbit, (x + s) + s. Since the 
value of the sbit s is not known to anyone else, one can 
only guess a random bit from the public communication. 

The activation protocol is obtained by translating the 
quantum one, and works as follows, see also Fig. [l] First, 
Alice teleports her bit in A2 to Clare, sacrificing an sbit 
in A\C\. Clare then has a new value in the register, 
C 1 = C\ + A\ + A2, and the probability distribution 
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becomes as follows, 
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Next, Bob teleports his value in B2 to David sacrificing 
an sbit in B2D. Then, David holds a new value D' = 
D + Bi + B 2 , with which the probability distribution of 
the four parties is given by 
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where m = 1,2,3,4. The explicit form of the distribu- 
tion of Eq. ( [l~3| is shown in the appendix B. Now, the 
distribution in Eq. ( |13[ ) is identical to the bound infor- 
mation in Eq. Q. Remind that the secret correlations 
in Q is unlockable, as it was shown in Sec III A There- 
fore, Clare, who is with two bits C 1 and C2 , announces if 
her two values are the same or not, depending on which, 
by applying local operations David and Elena can share 
an sbit: if it is announced that C l and C2 are unequal, 
either David or Elena applies the bit-flip operation. It is 
therefore shown that an sbit can be distilled between D 
and E. 



Moreover, symmetrizing the distribution in Eq. (10 1, 
i.e., 

PABCDE 1 PABCE£ 2 PABDES 3 PACDE£ i PBCDE£ 5 , (14) 

any two parties among the five can distill sbits against 
an eavesdropper who holds the five random variables 
£i£2^-3^-4^5- Therefore, it is straightforward that, with 
more copies, the five parties can share secrecy. 



IV. DISTRIBUTION OF ENTANGLEMENT 
AND SECRECY 

In this section, we show a usefulness of undistillable 
correlations in quantum and classical scenarios, respec- 



tively, namely that they can be used to distribute multi- 
partite distillable correlations. In the quantum scenario, 
we consider distribution of multi-partite GHZ state, 



l^> = (10) 



II 



We show that tripartite GHZ state can be deterministi- 
cally extended into four parties using LOCC when the 
Smolin state is shared by the four parties. 

We also derive a classical analogue of the quantum 
state distribution. Multipartite sbits of N parties, say 
A\, ■ ■ ■ , Am, is a classical analogue of the TV-partite GHZ 
state, being defined as the following probability distribu- 
tion 

Pa-l,— An ( a l! '" -i a N) — <5ai, 02^12,03 ' ' ' < W-i,a N /2, 

Pa u - ,A N ,e(ai,- ■ ■ >e) = Pa u - ,A N (ai, ■ ■ ■ , a N )P £ (e). 

We then show that the tripartite sbit can be extended 
into four parties using LOPC when the bound informa- 
tion in Eq. Q is shard by the four parties. Note that 
in both quantum and classical scenarios the distribution 
scheme works deterministically. 



A. Quantum scenario 

Suppose that Alice, Bob, Clare, and David share the 
Smolin state, and that only three of them, say Alice, Bob, 
and Clare, additionally share a tripartite GHZ state as 
follows 



Vabcd = {^(vIabcd ® Pabcd 



(15) 



where \i])abcd = I^abc ® \+)d and \+) D = (|0) + 
|l))/\/2. Let A Q for a = A,B,C,D denote the local 
operation performed by the party a. The goal is now to 
show that the state habcd can be transformed to 1^)4) 
using some local operations A Q . To this end, the local 
operation, A Q : C 2 ® C 2 — ?► C 2 , mapping from two-qubit 
to a single qubit states, can be explicitly constructed in 
terms of the Kraus operators, Kq — |0)(00| + |1)(11| and 
Kf = |0)(01| + |1)(10| as follows 



a q (.)= K ?(- 



K 



'it 



(16) 



j=0,l 



The above can be in fact rephrased as collective measure- 
ment by which it can only be known if two qubit systems 
are in the same state or not, leaving a single qubit system. 

Now, the four parties apply the local operation ( 16 ) 
to the state in (15). Suppose that four parties get mea- 
surement outcomes {%a, 3b, fcs, Id)- This happens with 
probability 



and the state resulted in the four parties is, 



(17) 



() 



Alice Bob Clare David 



the sum of the announced bit values, denoted by vn — 
J2k=A b c( s + David then adds vd to his bit ip as 
follows, 
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FIG. 2: Distribution of multipartite pure entanglement and 
secret key: Four parties share the Smolin states (dashed line) 
and are allowed to apply LOCC. Then, the tripartite GHZ 
state (solid line) can be distributed over the four parties using 
LOCC. The classical analogue also follows: the tripartite sbit 
can be distributed over the four using LOPC when the four- 
partite bound information in Eq. (JtJ is shared. 



(19) 

Eve has classical bits that are correlated with the four 
parties as it is shown in Eq. ^ , and also listens to the an- 
nounced bit values s + ik from the public communication. 
Then, as it is shown in Eq. (JTsJ) , Eve can only discrim- 
inates among the four possibilities of e; for i — 1,2,3,4. 
However, the sbit s shard by the three parties has not 
been known to Eve, who can make a random guess. 



As it is shown in (19), the bit value of David results 



in, and is explicitly computed as 



id 



where v = %a + ]b + ks + Id and af^ denotes the Pauli 
matrix a x in the David's side. Therefore, using classi- 
cal communication to discuss the measurement outcomes, 
the four parties can compute, v = %a + ]b + kc + Id- Iff 
is an even number, this means that the four-partite GHZ 
state is already shared. Otherwise, David applies the a x 
operation to his qubit, and the four-partite GHZ state 
can be shared. 



B. Classical scenario 

Suppose that the four parties share the bound infor- 
mation in ([7| and that only three of them, say Alice, 
Bob, and Clare, share an sbit in unknown value s for 
s £ {0, 1}. Let ik for k — A, B,C, D denote the value of 
the party k. The goal is then to distribute the tripartite 
sbit into the four parties using LOPC, such that David 
also securely share the sbit with the rest. 

The distribution protocol works as follows, see also Fig. 
[2j Each of the three parties sharing the sbit, individually 
and locally copy the sbit and then compute the parity of 
the two bits, one from the sbit s and the other from the 
bound information ik for k = A,B,C. Then, using the 
distribution in (21) which is a simpler expression of ([7]), 
the distribution is transformed as follows, 



k=A,B,C 



- ik 



(20) 



This is because, from the distribution of the bound in- 
formation ((7|), it holds that ^2 k=A B c D ik =0. Hence, 
it is shownthat a multipartite sbit can be distributed 
securely via bound information together with LOPC. 



V. CONCLUSION 

We have shown a case of four-partite bound informa- 
tion and its properties, unlockability and superactiva- 
tion. All these are obtained by deriving classical ana- 
logues of the Smolin state and its quantum effects, super- 
activation and unlockability in bound entangled states. 
It would be interesting to investigate which properties of 
quantum correlations can or cannot have their classical 
counterparts. For instance, existence of bipartite bound 
information remains open and is an challenging issue. 
Finally, we have shown a usefulness of undistillable cor- 
relations: bound entanglement and bound information 
can be used to distribute a multipartite GHZ state and 
multipartite sbits in quantum and classical scenarios, re- 
spectively. 
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(18) 



Afterwards, each party publicly announces the parity 
bit s + ik, so that David knows them and computes 
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Appendix A: Derivation of (111 



Appendix B: The full distribution of (131 



By individual measurement to each copy of two Smolin 
states in p]), the five parties share measurement data 
such that Alice, Bob, and Clare possess two values la- 
beled 1 and 2 and David and Elena keep single values. 
Both the first and the second distributions in the form in 
Q can be written in a simpler form as follows. For the 
first copy, 
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(21) 



where i = 0, 1, and for the second copy of A2, B2, C2 
and E, assuming Eve holding the second parameter 
k = 1,2,3,4, 
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(22) 



for j = 1, 2. The full probability obtained by measuring 
the state in (pi) is then shown in ( 11 ). 



The full distribution of ( 13 ) is explicitly shown as fol 



lows, for different values of £x, 











C 2 






D 






E 




£x 


£2 




J 






j 






3 






3 




ei 


fl 




j 




3 


+ 


1 




3 




3 


+ 


1 


ei 


h 




3 






3 




3 


+ 


1 


3 


+ 


1 


ex 


h 




3 




3 


+ 


1 


3 


+ 


1 




j 




ex 


h 




3 






3 






3 






3 




C-2 


h 




3 




3 


+ 


1 




3 




3 


+ 


1 


£2 


h 




3 






3 




3 


+ 


1 


3 


+ 


1 


£2 


h 




3 




3 


+ 


1 


3 


+ 


1 




3 




£2 


h 


3 


+ 


1 




3 




3 


+ 


1 




3 




£3 


h 


3 


+ 


1 


3 


+ 


1 


3 


+ 


1 


3 


+ 


1 


£3 


h 


3 


+ 


1 




3 






3 




3 


+ 


1 


£3 


h 


3 


+ 


1 


3 


+ 


1 




3 






3 




£3 


h 


3 


+ 


1 




3 




3 


+ 


1 




3 




Q 


h 


3 


+ 


1 


3 


+ 


1 


3 


+ 


1 


3 


+ 


1 


£4 


h 


3 


+ 


1 




3 






3 




3 


+ 


1 


C4 


h 


3 


+ 


1 


j 


+ 


1 




3 






3 




£4 


k 



(23) 



For cases when Eve is with e 3 or e 4 , the distribution in 
(13) can be obtained by replacing j with j + 1 in (23). 
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